walinuxagent

maintainer lieseldehmel · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a verifiable source tarball on GitHub with a valid checksum, and the flagged orphaned status does not indicate active malice or supply-chain compromise.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a verifiable source tarball on GitHub with a valid checksum, and the flagged orphaned status does not indicate active malice or supply-chain compromise.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Recently orphaned & re-adopted orphaned_readopted

This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.

PKGBUILD

      1# Maintainer: MatMoul <matmoul at the google email domain which is .com>
    
      2
    
      3_githubuser=Azure
    
      4_githubrepo=WALinuxAgent
    
      5_pkgtagname=v2.11.1.12
    
      6
    
      7pkgname=walinuxagent
    
      8pkgver=2.11.1.12
    
      9pkgrel=1
    
      10pkgdesc='Microsoft Azure Linux Agent'
    
      11arch=('any')
    
      12url="https://github.com/${_githubuser}/${_githubrepo}"
    
      13license=('Apache')
    
      14depends=('python' 'python-distro' 'openssh' 'openssl' 'parted' 'net-tools')
    
      15makedepends=('python-setuptools')
    
      16install=${pkgname}.install
    
      17backup=('etc/waagent.conf')
    
      18source=("${_githubrepo}-${pkgver}.tar.gz::https://github.com/${_githubuser}/${_githubrepo}/archive/refs/tags/${_pkgtagname}.tar.gz")
    
      19sha256sums=('faab56182f55b6dd44e7c018305637e4a1708d5388fe1a8524e020825eac5f92')
    
      20
    
      21package() {
    
      22	cd "${_githubrepo}-${pkgver}"
    
      23	python setup.py install --root="$pkgdir" --prefix="/usr" --optimize=1
    
      24	install -Dm644 LICENSE.txt "$pkgdir"/usr/share/licenses/$pkgname/LICENSE.txt
    
      25}
    
      26

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 05:10:22	MEDIUM	1
2026-06-18 16:11:54	CLEAN	0